I created ILM policy to move after 1 day from the hot phase to the warm phase.
But it didn't work.
I want to make "managed": true for the above output and enable policy for index.
When looking at the index template settings, it is as below.

this is not as easy as it should be in elasticsearch/kibana.
this document is what i followed and worked.. but there should be an easier way.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.